This talk https://talks.golang.org/2019/playground-v3/playground-v3.sl... on the golang playground has some details on its security considerations.